Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-05-2015 Ran by Jola (administrator) on MOTYLEK on 24-05-2015 12:09:31 Running from E:\Documents and Settings\Jola\Moje dokumenty\Downloads Loaded Profiles: Jola (Available Profiles: Jola) Platform: Microsoft Windows XP Professional Dodatek Service Pack 3 (X86) OS Language: Polski Internet Explorer Version 6 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Avast Software s.r.o.) E:\Program Files\AVAST Software\Avast\AvastSvc.exe (Realtek Semiconductor Corp.) E:\WINDOWS\RTHDCPL.EXE (Intel Corporation) E:\WINDOWS\system32\igfxtray.exe (Intel Corporation) E:\WINDOWS\system32\hkcmd.exe (Intel Corporation) E:\WINDOWS\system32\igfxpers.exe (Synaptics Incorporated) E:\Program Files\Synaptics\SynTP\SynTPEnh.exe () E:\Program Files\SAMSUNG\Samsung Update Plus\SUPBackGround.exe () E:\Program Files\SAMSUNG\Samsung Battery Manager\BatteryManager.exe (SEC) E:\Program Files\SAMSUNG\Samsung Recovery Solution 4\WCScheduler.exe (Avast Software s.r.o.) E:\Program Files\AVAST Software\Avast\avastui.exe (Macrovision Corporation) E:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (Intel Corporation) E:\WINDOWS\system32\igfxsrvc.exe (O&O Software GmbH) E:\Program Files\OO Software\Defrag\oodtray.exe (Spotify Ltd) E:\Documents and Settings\Jola\Dane aplikacji\Spotify\Data\SpotifyWebHelper.exe (Broadcom Corporation.) E:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Samsung Electronics Co., Ltd.) E:\Program Files\SAMSUNG\Easy Display Manager\dmhkcore.exe (SAMSUNG Electronics Co., Ltd.) E:\Program Files\SAMSUNG\MagicKBD\MagicKBD.exe (Samsung Electronics Co., Ltd.) E:\Program Files\SAMSUNG\MagicKBD\PerformanceManager.exe (Aladdin Knowledge Systems Ltd.) E:\WINDOWS\system32\hasplms.exe (O&O Software GmbH) E:\Program Files\OO Software\Defrag\oodag.exe (SRS Labs, Inc.) E:\Program Files\SRS Labs\SRS WOW XT and TSXT\SRS_PostInstaller.exe (Broadcom Corporation.) E:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe (Broadcom Corporation.) E:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (Intel Corporation) E:\WINDOWS\system32\igfxext.exe (Microsoft Corporation) E:\WINDOWS\system32\wbem\unsecapp.exe (Macrovision Corporation) E:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation) E:\Program Files\Common Files\InstallShield\UpdateService\agent.exe (Google Inc.) E:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) E:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) E:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) E:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) E:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) E:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDCPL] => E:\WINDOWS\RTHDCPL.EXE [19520544 2010-03-17] (Realtek Semiconductor Corp.) HKLM\...\Run: [SynTPEnh] => E:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1578280 2009-10-09] (Synaptics Incorporated) HKLM\...\Run: [MagicKeyboard] => E:\Program Files\SAMSUNG\MagicKBD\PreMKBD.exe [151552 2006-05-14] () HKLM\...\Run: [SUPBackground] => E:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [300912 2010-04-20] () HKLM\...\Run: [DMHotKey] => E:\Program Files\Samsung\Easy Display Manager\DMLoader.exe [466944 2006-12-27] (SAMSUNG Electronics) HKLM\...\Run: [BatteryManager] => E:\Program Files\Samsung\Samsung Battery Manager\BatteryManager.exe [3152896 2009-08-17] () HKLM\...\Run: [SamsungWInClon] => E:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler HKLM\...\Run: [AvastUI.exe] => E:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-17] (Avast Software s.r.o.) HKLM\...\Run: [ISUSPM Startup] => e:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe [249856 2005-08-11] (Macrovision Corporation) HKLM\...\Run: [ISUSScheduler] => E:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-08-11] (Macrovision Corporation) HKLM\...\Run: [OODefragTray] => E:\Program Files\OO Software\Defrag\oodtray.exe [2771784 2010-09-10] (O&O Software GmbH) HKLM\...\Run: [Adobe Reader Speed Launcher] => E:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-01-03] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] => E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-02] (Adobe Systems Incorporated) HKU\S-1-5-21-343818398-1715567821-527237240-1003\...\Run: [BatteryLifeExtender] => E:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [567976 2009-11-19] (Samsung Electronics. Co. Ltd.) HKU\S-1-5-21-343818398-1715567821-527237240-1003\...\Run: [Spotify Web Helper] => E:\Documents and Settings\Jola\Dane aplikacji\Spotify\Data\SpotifyWebHelper.exe [1676344 2015-01-10] (Spotify Ltd) HKU\S-1-5-21-343818398-1715567821-527237240-1003\...\Run: [DAEMON Tools Lite] => E:\Program Files\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-343818398-1715567821-527237240-1003\...\MountPoints2: {7477831a-bc56-11e4-adf9-001bb14a04d5} - F:\AutoRun.exe Startup: E:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BTTray.lnk [2015-01-10] ShortcutTarget: BTTray.lnk -> E:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => E:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-07] (Avast Software s.r.o.) BootExecute: autocheck autochk * OODBS ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKU\S-1-5-21-343818398-1715567821-527237240-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms} HKU\S-1-5-21-343818398-1715567821-527237240-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006 HKU\S-1-5-21-343818398-1715567821-527237240-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/pl-pl/?ocid=iehp HKU\S-1-5-21-343818398-1715567821-527237240-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006 URLSearchHook: HKU\S-1-5-21-343818398-1715567821-527237240-1003 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - E:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation) HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-343818398-1715567821-527237240-1003 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms} BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03] (Adobe Systems Incorporated) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> E:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-15] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> E:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-07] (Avast Software s.r.o.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> E:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-15] (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 208.67.222.222 208.67.220.220 FireFox: ======== FF ProfilePath: E:\Documents and Settings\Jola\Dane aplikacji\Mozilla\Firefox\Profiles\mvzm2hsl.default-1420916285796 FF Plugin: @adobe.com/FlashPlayer -> E:\WINDOWS\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] () FF Plugin: @comarch.com/NOL,version=3.0 -> E:\Program Files\Common Files\NOL3\npn30plugin.dll [2013-04-04] (COMARCH S.A.) FF Plugin: @java.com/DTPlugin,version=11.45.2 -> E:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-15] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> E:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-15] (Oracle Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> E:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> E:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.) FF Plugin: Adobe Reader -> E:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2012-01-03] (Adobe Systems Inc.) FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - E:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - E:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-10] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR DefaultSearchKeyword: Default -> google CHR DefaultSuggestURL: Default -> https://www.google.com/complete/search?client=chrome&q={searchTerms} CHR Profile: E:\Documents and Settings\Jola\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - E:\Documents and Settings\Jola\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-01-10] CHR Extension: (Google Drive) - E:\Documents and Settings\Jola\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-10] CHR Extension: (YouTube) - E:\Documents and Settings\Jola\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-10] CHR Extension: (Google Search) - E:\Documents and Settings\Jola\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-10] CHR Extension: (Bookmark Manager) - E:\Documents and Settings\Jola\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-30] CHR Extension: (Avast Online Security) - E:\Documents and Settings\Jola\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-18] CHR Extension: (Google Wallet) - E:\Documents and Settings\Jola\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-10] CHR Extension: (Gmail) - E:\Documents and Settings\Jola\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-10] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - E:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-19] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; E:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-07] (Avast Software s.r.o.) R2 hasplms; E:\WINDOWS\system32\hasplms.exe [2562048 2008-04-24] (Aladdin Knowledge Systems Ltd.) R2 OODefragAgent; E:\Program Files\OO Software\Defrag\oodag.exe [2320712 2010-09-10] (O&O Software GmbH) R2 SRS_WOWXT_Service; E:\Program Files\SRS Labs\SRS WOW XT and TSXT\SRS_PostInstaller.exe [66792 2009-08-06] (SRS Labs, Inc.) S3 WPFFontCache_v0400; E:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AegisP; E:\WINDOWS\System32\DRIVERS\AegisP.sys [21035 2015-01-10] (Meetinghouse Data Communications) [] R2 aksfridge; E:\WINDOWS\system32\drivers\aksfridge.sys [350720 2008-03-18] (Aladdin Knowledge Systems Ltd.) S3 Ambfilt; E:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2009-11-18] (Creative) R2 aswHwid; E:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-05-07] () R2 aswMonFlt; E:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-05-07] (Avast Software s.r.o.) R1 aswRdr; E:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-05-07] (Avast Software s.r.o.) R0 aswRvrt; E:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-05-07] () R1 aswSnx; E:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-05-07] (Avast Software s.r.o.) R1 aswSP; E:\WINDOWS\system32\drivers\aswSP.sys [427992 2015-05-07] (Avast Software s.r.o.) R1 aswTdi; E:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-05-07] (Avast Software s.r.o.) R0 aswVmm; E:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-05-07] () R3 BCM43XX; E:\WINDOWS\System32\DRIVERS\bcmwl5.sys [3368832 2011-06-29] (Broadcom Corporation) R3 BTKRNL; E:\WINDOWS\System32\DRIVERS\btkrnl.sys [991264 2009-07-09] (Broadcom Corporation.) R3 BTWUSB; E:\WINDOWS\System32\Drivers\btwusb.sys [45984 2009-09-08] (Broadcom Corporation.) S3 CCDECODE; E:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation) R2 DOSMEMIO; E:\WINDOWS\system32\MEMIO.SYS [4300 2000-08-24] () [] R1 dtsoftbus01; E:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [243128 2015-01-10] (Disc Soft Ltd) R2 Hardlock; E:\WINDOWS\system32\drivers\hardlock.sys [586240 2008-02-11] (Aladdin Knowledge Systems Ltd.) R2 Haspnt; E:\WINDOWS\system32\drivers\Haspnt.sys [47616 2015-01-30] (Aladdin Knowledge Systems) [] S2 Kmm4xNT; E:\WINDOWS\system32\Drivers\Kmm4xNT.sys [95484 2002-04-26] (DATOM Dariusz Cielebąk) [] S3 Monfilt; E:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2009-11-18] (Creative Technology Ltd.) S3 NdisIP; E:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation) R0 Si3112; E:\WINDOWS\system32\Drivers\Si3112.sys [62336 2009-10-16] (Silicon Image, Inc.) [] S0 Si3114r5; E:\WINDOWS\system32\Drivers\Si3114r5.sys [195072 2009-10-16] (Silicon Image, Inc) R0 Si3124; E:\WINDOWS\system32\Drivers\Si3124.sys [69248 2009-10-16] (Silicon Image, Inc.) [] R0 Si3132; E:\WINDOWS\system32\Drivers\Si3132.sys [74672 2009-10-16] (Silicon Image, Inc.) R0 Si3132r5; E:\WINDOWS\system32\Drivers\Si3132r5.sys [215856 2009-10-16] (Silicon Image, Inc) R0 Si3531; E:\WINDOWS\system32\Drivers\Si3531.sys [212520 2009-10-16] (Silicon Image, Inc) R3 SRS_PremiumSound_Service; E:\WINDOWS\System32\drivers\srs_PremiumSound_i386.sys [227496 2009-07-31] () S3 SUEPD; E:\WINDOWS\System32\DRIVERS\SUE_PD.sys [19840 2006-08-01] (Samsung) [] R3 VMC33F; E:\WINDOWS\System32\Drivers\VMC33F.sys [237952 2010-03-04] (Vimicro Corporation) S3 yukonwxp; E:\WINDOWS\System32\DRIVERS\yk51x86.sys [298272 2010-08-30] (Marvell) S4 IntelIde; No ImagePath U1 WS2IFSL; No ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-05-24 12:09 - 2015-05-24 12:09 - 00000000 ____D () E:\FRST 2015-05-07 19:03 - 2015-05-07 19:03 - 00291312 _____ (Avast Software s.r.o.) E:\WINDOWS\system32\aswBoot.exe 2015-05-07 19:03 - 2015-05-07 19:03 - 00043112 _____ (Avast Software s.r.o.) E:\WINDOWS\avastSS.scr 2015-04-26 20:23 - 2015-04-26 20:23 - 00000000 ____D () E:\Program Files\Mozilla Firefox ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-05-24 12:10 - 2015-01-10 13:43 - 00000000 ____D () E:\Documents and Settings\Jola\Ustawienia lokalne\Temp 2015-05-24 11:58 - 2015-01-10 15:05 - 00000364 ____H () E:\WINDOWS\Tasks\avast! Emergency Update.job 2015-05-24 11:53 - 2015-01-10 14:27 - 00763990 _____ () E:\WINDOWS\system32\PerfStringBackup.INI 2015-05-24 11:53 - 2009-10-16 19:45 - 00356068 _____ () E:\WINDOWS\system32\perfh015.dat 2015-05-24 11:53 - 2009-10-16 19:45 - 00049910 _____ () E:\WINDOWS\system32\perfc015.dat 2015-05-24 11:49 - 2015-01-10 13:43 - 00000000 ___HD () E:\Documents and Settings\Jola\Ustawienia lokalne\Dane aplikacji 2015-05-24 11:49 - 2015-01-10 13:35 - 01249333 _____ () E:\WINDOWS\WindowsUpdate.log 2015-05-24 11:48 - 2015-03-28 15:23 - 00000260 _____ () E:\WINDOWS\Tasks\WGASetup.job 2015-05-24 11:48 - 2015-01-10 20:06 - 00001032 _____ () E:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2015-05-24 11:48 - 2015-01-10 17:11 - 00000220 _____ () E:\WINDOWS\Tasks\Powiadomienie o zakończeniu obsługi systemu Microsoft Windows XP — logowanie.job 2015-05-24 11:48 - 2015-01-10 17:10 - 00112288 _____ () E:\WINDOWS\system32\oodbs.lor 2015-05-24 11:48 - 2015-01-10 14:30 - 00000159 _____ () E:\WINDOWS\wiadebug.log 2015-05-24 11:48 - 2015-01-10 14:30 - 00000050 _____ () E:\WINDOWS\wiaservc.log 2015-05-24 11:48 - 2015-01-10 13:42 - 00000006 ____H () E:\WINDOWS\Tasks\SA.DAT 2015-05-24 11:48 - 2009-10-16 19:45 - 00002206 _____ () E:\WINDOWS\system32\wpa.dbl 2015-05-21 20:58 - 2015-01-10 13:43 - 00000188 ___SH () E:\Documents and Settings\Jola\ntuser.ini 2015-05-21 20:58 - 2015-01-10 13:42 - 00032546 _____ () E:\WINDOWS\SchedLgU.Txt 2015-05-17 13:16 - 2015-01-10 20:06 - 00001036 _____ () E:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2015-05-07 20:35 - 2015-01-10 14:56 - 00000000 ____D () E:\Documents and Settings\Jola\Moje dokumenty\Pobrane 2015-05-07 19:57 - 2015-01-10 16:06 - 00002551 _____ () E:\Documents and Settings\Jola\Pulpit\CorelDRAW X3.lnk 2015-05-07 19:03 - 2015-01-10 15:01 - 00787760 _____ (Avast Software s.r.o.) E:\WINDOWS\system32\Drivers\aswSnx.sys 2015-05-07 19:03 - 2015-01-10 15:01 - 00427992 _____ (Avast Software s.r.o.) E:\WINDOWS\system32\Drivers\aswSP.sys 2015-05-07 19:03 - 2015-01-10 15:01 - 00209048 _____ () E:\WINDOWS\system32\Drivers\aswVmm.sys 2015-05-07 19:03 - 2015-01-10 15:01 - 00074976 _____ (Avast Software s.r.o.) E:\WINDOWS\system32\Drivers\aswMonFlt.sys 2015-05-07 19:03 - 2015-01-10 15:01 - 00057888 _____ (Avast Software s.r.o.) E:\WINDOWS\system32\Drivers\aswTdi.sys 2015-05-07 19:03 - 2015-01-10 15:01 - 00055200 _____ (Avast Software s.r.o.) E:\WINDOWS\system32\Drivers\aswRdr.sys 2015-05-07 19:03 - 2015-01-10 15:01 - 00049904 _____ () E:\WINDOWS\system32\Drivers\aswRvrt.sys 2015-05-07 19:03 - 2015-01-10 15:01 - 00024144 _____ () E:\WINDOWS\system32\Drivers\aswHwid.sys 2015-05-05 17:25 - 2015-01-10 13:43 - 00000000 ____D () E:\Documents and Settings\Jola\Pulpit 2015-05-05 17:18 - 2015-01-10 20:09 - 00001829 _____ () E:\Documents and Settings\All Users\Pulpit\Google Chrome.lnk 2015-04-30 20:26 - 2015-01-12 09:32 - 00131365 _____ () E:\WINDOWS\setupapi.log 2015-04-30 20:25 - 2015-01-18 16:29 - 00012515 _____ () E:\WINDOWS\setupact.log 2015-04-30 19:09 - 2015-01-10 14:53 - 00000000 ____D () E:\Program Files\Mozilla Maintenance Service Some files in TEMP: ==================== E:\Documents and Settings\Jola\Ustawienia lokalne\Temp\bitool.dll E:\Documents and Settings\Jola\Ustawienia lokalne\Temp\hdinst_x64.exe E:\Documents and Settings\Jola\Ustawienia lokalne\Temp\Nokia_PC_Suite_pol.exe E:\Documents and Settings\Jola\Ustawienia lokalne\Temp\Nokia_Suite_PCS_update.exe E:\Documents and Settings\Jola\Ustawienia lokalne\Temp\ose00000.exe E:\Documents and Settings\Jola\Ustawienia lokalne\Temp\ose00001.exe E:\Documents and Settings\Jola\Ustawienia lokalne\Temp\ose00002.exe E:\Documents and Settings\Jola\Ustawienia lokalne\Temp\Quarantine.exe E:\Documents and Settings\Jola\Ustawienia lokalne\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) E:\WINDOWS\explorer.exe => File is digitally signed E:\WINDOWS\system32\winlogon.exe => File is digitally signed E:\WINDOWS\system32\svchost.exe => File is digitally signed E:\WINDOWS\system32\services.exe => File is digitally signed E:\WINDOWS\system32\User32.dll => File is digitally signed E:\WINDOWS\system32\userinit.exe => File is digitally signed E:\WINDOWS\system32\rpcss.dll => File is digitally signed E:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed ==================== End of log ============================